StackRadar

CVE-2023-37920

Critical

Advisory

Published 25 Jul 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
610
of 17,787 indexed, latest versions
Container images
651
deployed by those charts
Fix available
3 of 5
affected packages

Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update

Carried by container images the latest versions of 610 of 17,787 indexed charts deploy, on 651 images.

Affected packageAffected versionsFixed inImages
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+19 moreno fix listed83
python-certifideb2018.1.18-2, 2019.11.28-1, 2020.6.20-1, 2022.9.24-1no fix listed57
py3-certifiapk2023.5.7-r02023.7.22-r01
ca-certificatesrpm2018.2.24-6.el8, 2019.2.32-80.0.el8_1, 2020.2.41-80.0.el8_2, 2021.2.50-80.0.el8_4+8 more0:2024.2.69_v8.0.303-80.0.el8_10, 0:2024.2.69_v8.0.303-91.4.el9_4203
certifipypi2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+21 more2023.7.22427
OSV records
ALPINE-CVE-2023-37920DEBIAN-CVE-2023-37920RHBA-2024:5691RHBA-2024:5736UBUNTU-CVE-2023-37920GHSA-xqr8-7jwr-rhp7
Also known as
PYSEC-2023-135

Charts affected

610 by stars
ChartLatestAffected imagesRadar Score
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-certifi@2018.1.18-2
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
no fix listed
2023.7.22

Open the chart page →

27,749
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python-pip@9.0.1-2.3~ubuntu1.18.04.2
certifi@2020.6.20
no fix listed
2023.7.22

Open the chart page →

18,884
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
2023.7.22

Open the chart page →

22,425
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-certifi@2018.1.18-2
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
no fix listed
2023.7.22

Open the chart page →

24,356
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

7,486
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
certifi@2020.6.20
2023.7.22

Open the chart page →

2,264
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
python-pip@22.0.2+dfsg-1ubuntu0.3
no fix listed

Open the chart page →

4,846
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
certifi@2020.6.20
2023.7.22

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-certifi@2019.11.28-1
python-pip@20.0.2-5ubuntu1.9
certifi@2022.12.7
no fix listed
no fix listed
2023.7.22

Open the chart page →

14,910
kube-openid-connectdevopstalesVerified publisher1.1.01 of 1See more

kube-openid-connect devopstales 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
devopstales/kube-openid-connector:1.042c40a0e9f1b
certifi@2021.10.8
2023.7.22

Open the chart page →

1,333
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
certifi@2021.5.30
2023.7.22

Open the chart page →

8,645
calicodevtron-labs0.1.11 of 4See more

calico devtron-labs 0.1.1

1 of the 4 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

10,073
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

6,237
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
certifi@2021.5.30
2023.7.22

Open the chart page →

8,645
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
certifi@2018.8.24
2023.7.22

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

21,455
vmware-exporterdniel0.0.11 of 1See more

vmware-exporter dniel 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
certifi@2021.10.8
2023.7.22

Open the chart page →

1,351
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
python-certifi@2020.6.20-1
certifi@2020.6.20
no fix listed
2023.7.22

Open the chart page →

24,975
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
certifi@2022.6.15
2023.7.22

Open the chart page →

4,550
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
quay.io/keycloak/keycloak:20.0054ef67eb7da
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

55,988
drogue-cloud-examplesdrogue-iotVerified publisher0.7.114 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

4 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
python-certifi@2020.6.20-1
certifi@2020.6.20
no fix listed
2023.7.22
ghcr.io/ctron/kubectl:1.25e37d61b5277c
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

30,759
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
certifi@2022.5.18.1
2023.7.22

Open the chart page →

13,558
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

6,914
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
certifi@2023.5.7
2023.7.22

Open the chart page →

1,990
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
certifi@2020.4.5.1
2023.7.22
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
certifi@2020.6.20
2023.7.22
amundsendev/amundsen-search:2.4.099dda9502c3e
certifi@2020.6.20
2023.7.22

Open the chart page →

11,174
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
certifi@2020.12.5
2023.7.22

Open the chart page →

5,161
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
certifi@2020.4.5.1
2023.7.22

Open the chart page →

5,055
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

11,482
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22

Open the chart page →

30,167
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
python-certifi@2019.11.28-1
python-pip@20.0.2-5ubuntu1.6
certifi@2019.11.28
no fix listed
no fix listed
2023.7.22

Open the chart page →

25,239
eoloPlanteolo-plannerVerified publisher0.1.02 of 7See more

eoloPlant eolo-planner 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,667
eoloplannereoloplannerVerified publisher0.1.02 of 7See more

eoloplanner eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

32,336
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.02 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,667
eoloplannereoloplanner-molynx-gat0.1.02 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

28,539
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,188
eoloplanteoloplant1.0.02 of 7See more

eoloplant eoloplant 1.0.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,667
eoloplantseoloplants-urjcVerified publisher0.1.02 of 7See more

eoloplants eoloplants-urjc 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,812
servereoloserverVerified publisher0.1.02 of 7See more

server eoloserver 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

32,336
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
python-pip@20.0.2-5ubuntu1.8
no fix listed

Open the chart page →

9,383
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
certifi@2022.12.7
2023.7.22

Open the chart page →

4,678
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
python-certifi@2019.11.28-1
certifi@2019.11.28
no fix listed
2023.7.22

Open the chart page →

20,987
argocd-version-exporterevilmartians0.0.11 of 1See more

argocd-version-exporter evilmartians 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
certifi@2021.5.30
2023.7.22

Open the chart page →

2,401
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
certifi@2023.5.7
2023.7.22

Open the chart page →

2,897
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
certifi@2022.12.7
2023.7.22

Open the chart page →

4,085
fediblockholefedihost0.1.01 of 1See more

fediblockhole fedihost 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
certifi@2022.12.7
2023.7.22

Open the chart page →

815
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
certifi@2019.6.16
2023.7.22

Open the chart page →

14,688

Container images carrying it

651 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10
1
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
1
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
minio/operator:v5.0.9170b154d2c61
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
minio/operator:v4.1.02adc5be088f5
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10
1
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
certifi@2020.12.5
2023.7.22
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
certifi@2022.9.24
2023.7.22
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
certifi@2022.12.7
2023.7.22
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
certifi@2022.6.15
2023.7.22
1
mozilla/syncserver:latest016162bf39d8
certifi@2019.3.9
2023.7.22
1
mshanley80/httpbin2022:latest5b189a70c0fb
python-pip@20.0.2-5ubuntu1.6
certifi@2022.12.7
no fix listed
2023.7.22
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
certifi@2019.6.16
2023.7.22
1
mysql/mysql-cluster:8.0.20e4ea36622cdd
certifi@2019.11.28
2023.7.22
1
neilpeterson/chart-tweet:latest64fd8dab075f
certifi@2018.1.18
2023.7.22
1
neilpeterson/get-tweet:v28b645ac1a23e
certifi@2018.4.16
2023.7.22
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
certifi@2018.1.18
2023.7.22
1
neilpeterson/osba-storage-demo:latest29d229ab446e
certifi@2018.1.18
2023.7.22
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
certifi@2018.4.16
2023.7.22
1
neilpeterson/process-tweet:latest39ce9f92e899
certifi@2018.4.16
2023.7.22
1
netbirdio/dashboard:v2.22.215a3aab9a345
certifi@2020.12.5
2023.7.22
1
netbirdio/dashboard:v2.90.101b59e1c905c9
certifi@2020.12.5
2023.7.22
1
netbirdio/dashboard:v2.90.2332cc31f5f35
certifi@2020.12.5
2023.7.22
1
netbirdio/dashboard:v2.13.188b5fb704a8c
certifi@2020.12.5
2023.7.22
1
netboxcommunity/netbox:v3.2.83d652dca5351
certifi@2022.6.15
2023.7.22
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
certifi@2020.4.5.1
2023.7.22
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
certifi@2022.12.7
2023.7.22
1
nlmacamp/check_mk:latest5dbb8589f824
certifi@2018.10.15
2023.7.22
1
nyurik/alpine-python3-requests:lateste0553236e3eb
certifi@2021.5.30
2023.7.22
1
octoprint/octoprint:1.4.0106c26efcd8a
certifi@2020.12.5
2023.7.22
1
octoprint/octoprint:1.6.1ea3bffae2470
certifi@2021.5.30
2023.7.22
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
python-pip@9.0.1-2.3~ubuntu1.18.04.1
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
python-pip@8.1.1-2ubuntu0.4
certifi@2018.8.24
no fix listed
2023.7.22
1
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
2023.7.22
1
opendatacube/restcube:latest91870111837c
python-certifi@2018.1.18-2
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
no fix listed
2023.7.22
1
opendatacube/wms:latest1b90cdf68831
python-certifi@2018.1.18-2
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
no fix listed
2023.7.22
1
openelevation/open-elevation:latest82fb21612e86
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
openemr/openemr:6.1.089eaa6d9a4e3
certifi@2020.12.5
2023.7.22
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
certifi@2022.12.7
2023.7.22
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
certifi@2021.10.8
2023.7.22
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
certifi@2021.10.8
2023.7.22
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
python-pip@9.0.1-2.3~ubuntu1.18.04.4
certifi@2020.6.20
no fix listed
2023.7.22
1
openzaak/open-notificaties:1.3.02e65313b9b10
certifi@2021.10.8
2023.7.22
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
certifi@2021.10.8
2023.7.22
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
certifi@2021.10.8
2023.7.22
1
pecan/monitor:1.7.273b2074f3fec
certifi@2021.10.8
2023.7.22
1
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.